CIRCL/vulnerability-attack-techniques huggingface dataset:
CVE-2020-11055: Cross-site Scripting in BookStack
In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system to be saved in a comment, which would then be executed/displayed to others users viewing the comment. Through this vulnerability custom JavaScript code could be injected and therefore ran on other user machines. This most impacts scenarios where not-trusted users are given permission to create comments. This has been fixed in 0.29.2.

Affected products: BookStackApp BookStack
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
ATT&CK primary impact: T1059
ATT&CK secondary impact: T1185
ATT&CK techniques (all): T1059, T1185
CVE-2015-6175: 
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."

CWE: CWE-noinfo Not enough information
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1608
CVE-2019-15963: Cisco Unified Communications Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive information in the web-based management interface of the affected software. The vulnerability is due to insufficient protection of user-supplied input by the web-based management interface of the affected service. An attacker could exploit this vulnerability by accessing the interface and viewing restricted portions of the software configuration. A successful exploit could allow the attacker to gain access to sensitive information or conduct further attacks.

Affected products: Cisco Cisco Unity Connection
CWE: CWE-200
CVSS: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
ATT&CK exploitation technique(s): T1078
ATT&CK primary impact: T1005
ATT&CK techniques (all): T1005, T1078
CVE-2010-3915: 
Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916.

ATT&CK techniques (all): T1203, T1204.002
CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability

Affected products: Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Outlook 2016, Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 2019, Microsoft Microsoft Outlook 2013 Service Pack 1
CWE: CWE-20: Improper Input Validation
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
ATT&CK exploitation technique(s): T1203
ATT&CK primary impact: T1550.002
ATT&CK secondary impact: T1078
ATT&CK techniques (all): T1078, T1203, T1550.002
CVE-2023-34192: 
Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1055
ATT&CK primary impact: T1059
ATT&CK secondary impact: T1185
ATT&CK techniques (all): T1055, T1059, T1185
CVE-2015-1494: 
The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an mfbfw[*] parameter in an update action to wp-admin/admin-post.php, as demonstrated by the mfbfw[padding] parameter and exploited in the wild in February 2015.

ATT&CK techniques (all): T1068, T1203, T1211, T1497
CVE-2021-27860: Arbitrary file upload vulnerability in FatPipe software
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

Affected products: FatPipe WARP, FatPipe IPVPN, FatPipe MPVPN
CWE: CWE-434 Unrestricted Upload of File with Dangerous Type
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK primary impact: T1505.003
ATT&CK techniques (all): T1190, T1505.003
CVE-2015-5123: 
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

CWE: CWE-416 Use After Free
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1189, T1203
CVE-2018-8453: 
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Affected products: Microsoft Windows 7, Microsoft Windows Server 2012 R2, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2019, Microsoft Windows Server 2012, Microsoft Windows 8.1, Microsoft Windows Server 2016, Microsoft Windows Server 2008 R2, Microsoft Windows 10, Microsoft Windows 10 Servers
CWE: Elevation of Privilege, CWE-noinfo Not enough information
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1608
CVE-2017-11882: 
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.

Affected products: Microsoft Corporation Microsoft Office
CWE: Remote Code Execution, CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1566.001
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1203, T1204.002, T1566.001
CVE-2020-3306: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to incorrect processing of certain DHCP packets. An attacker could exploit this vulnerability by sending a crafted DHCP packet to the affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Affected products: Cisco Cisco Adaptive Security Appliance (ASA) Software
CWE: CWE-400
CVSS: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK primary impact: T1499
ATT&CK techniques (all): T1190, T1499
CVE-2021-1497: Cisco HyperFlex HX Command Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products: Cisco Cisco HyperFlex HX Data Platform
CWE: CWE-78
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1133
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1133
CVE-2018-15784: DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

Affected products: Dell Dell Networking OS10
CWE: Improper Certificate Validation
CVSS: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
ATT&CK primary impact: T1557
ATT&CK techniques (all): T1557
CVE-2012-6498: 
Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012.

ATT&CK techniques (all): T1059, T1190, T1505.003
CVE-2014-0266: 
The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to bypass the Same Origin Policy via a web page that is visited in Internet Explorer, aka "MSXML Information Disclosure Vulnerability."

ATT&CK techniques (all): T1189, T1203, T1204.002
CVE-2022-41328: 
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

Affected products: Fortinet FortiOS
CWE: CWE-22 Execute unauthorized code or commands
CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
ATT&CK exploitation technique(s): T1574
ATT&CK primary impact: T1037
ATT&CK secondary impact: T1049, T1565.001
ATT&CK techniques (all): T1037, T1049, T1565.001, T1574
CVE-2019-8540: 
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

Affected products: Apple iOS, Apple macOS, Apple tvOS, Apple watchOS
CWE: A malicious application may be able to determine kernel memory layout
ATT&CK techniques (all): T1190, T1499.004
CVE-2018-19007: 
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.

Affected products: Geutebr&#195;&#188;ck GmbH E2 Camera Series versions prior to 1.12.0.25
CWE: CWE-78 IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78
ATT&CK exploitation technique(s): T1133
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1133
CVE-2018-0802: 
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

Affected products: Microsoft Corporation Equation Editor
CWE: Remote Code Execution, CWE-787 Out-of-bounds Write
CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1189
CVE-2016-4437: 
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

CWE: CWE-321 Use of Hard-coded Cryptographic Key
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1190
CVE-2009-3953: 
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

CWE: CWE-787 Out-of-bounds Write
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1204.002
ATT&CK techniques (all): T1204.002
CVE-2015-1539: 
Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.

ATT&CK techniques (all): T1190, T1548
CVE-2019-13527: 
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized.

Affected products: Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier
CWE: CWE-824 ACCESS OF UNINITIALIZED POINTER CWE-824
ATT&CK techniques (all): T1203, T1204.002
CVE-2016-9684: 
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.

ATT&CK techniques (all): T1059.004, T1190
CVE-2024-26169: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability

Affected products: Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 version 22H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 22H3, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)
CWE: CWE-269: Improper Privilege Management
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
ATT&CK exploitation technique(s): T1112, T1203
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1112, T1203
CVE-2019-0803: 
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

Affected products: Microsoft Windows, Microsoft Windows Server
CWE: Elevation of Privilege, CWE-noinfo Not enough information
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1203
CVE-2024-56145: RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.

Affected products: craftcms cms
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
CVSS: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
ATT&CK exploitation technique(s): T1055
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1055, T1059
CVE-2020-7004: 
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application.

Affected products: VISAM VBASE Editor, VISAM VBASE Web-Remote Module
CWE: CWE-276 INCORRECT DEFAULT PERMISSIONS CWE-276
ATT&CK primary impact: T1068
ATT&CK techniques (all): T1068
CVE-2020-8657: 
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.

CWE: CWE-798 Use of Hard-coded Credentials
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1106
ATT&CK techniques (all): T1106
CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability

Affected products: Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11
CWE: Remote Code Execution, CWE-918 Server-Side Request Forgery (SSRF)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C
ATT&CK exploitation technique(s): T1133
ATT&CK primary impact: T1090
ATT&CK secondary impact: T1005, T1505.003
ATT&CK techniques (all): T1005, T1090, T1133, T1505.003
CVE-2020-11738: 
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.

CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSS: CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
ATT&CK techniques (all): T1055, T1190
CVE-2021-37415: 
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.

CWE: CWE-306 Missing Authentication for Critical Function
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1190
ATT&CK techniques (all): T1190
CVE-2019-10973: 
Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user interface.

Affected products: Quest KACE
CWE: CWE-20 IMPROPER INPUT VALIDATION CWE-20
ATT&CK techniques (all): T1190
CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A bogus device can provide a bNumConfigurations value that exceeds the
initial value used in usb_get_configuration for allocating dev->config.

This can lead to out-of-bounds accesses later, e.g. in
usb_destroy_configuration.

Affected products: Linux Linux
CWE: CWE-787 Out-of-bounds Write
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1068, T1091
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1068, T1091
CVE-2019-15287: Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.

Affected products: Cisco Cisco WebEx WRF Player
CWE: CWE-119
CVSS: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATT&CK exploitation technique(s): T1204.002
ATT&CK primary impact: T1059
ATT&CK techniques (all): T1059, T1204.002
CVE-2018-8120: 
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Affected products: Microsoft Windows Server 2008, Microsoft Windows 7, Microsoft Windows Server 2008 R2
CWE: Elevation of Privilege, CWE-404 Improper Resource Shutdown or Release
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
ATT&CK techniques (all): T1189, T1203
CVE-2018-7520: 
An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords.

Affected products: Geutebr&#195;&#188;ck Geutebr&#195;&#188;ck G-Cam/EFD-2250 (part n&#194;&#176; 5.02024) firmware and Topline TopFD-2125 (part n&#194;&#176; 5.02820) firmware
CWE: CWE-284 IMPROPER ACCESS CONTROL CWE-284
ATT&CK primary impact: T1552.001
ATT&CK techniques (all): T1552.001
CVE-2016-9192: 
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).

Affected products: Cisco AnyConnect Secure Mobility Client
CWE: unspecified
ATT&CK techniques (all): T1190
CVE-2016-3351: 
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

CWE: CWE-noinfo Not enough information
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
ATT&CK techniques (all): T1518